Microsoft Internet Explorer Fix Includes Windows XP

Microsoft announced Thursday it has patched a major security hole in its flagship Web browser, including old versions for Windows XP – a break from past statements.

The Redmond, Wash., software giant this weekend warned users that hackers were exploiting a new flaw in Internet Explorer, the default browser for much of the Web. The flaw attracted unusual attention because it also affected older versions of Internet Explorer used with Windows XP.

As of April 8, Microsoft no longer supports Windows XP and had said it would stop patching it. That means hackers, in theory, would be able to use those holes in cyberattacks in perpetuity.

But the company decided to make an exception in this case.

“When we saw the first reports about this vulnerability we decided to fix it, fix it fast, and fix it for all our customers,” said Adrienne Hall, general manager of Microsoft’s security unit, in a blog post.

The software update went live at 10 a.m. West Coast time Thursday.

While making the fix this time, Hall’s post suggested customers should not get used to such actions. “Just because this update is out now doesn’t mean you should stop thinking about getting off Windows XP and moving to a newer version of Windows and the latest version of Internet Explorer,” she wrote.

“Of course we’re proud that so many people loved Windows XP, but the reality is that the threats we face today from a security standpoint have really outpaced the ability to protect those customers using an operating system that dates back over a decade.”